Hi Inouk,

Ok, I proceeded as you wrote so there is now a firewall.websrv using:

> uci add firewall include; uci set
> firewa...@include[-1].path=/etc/firewall.websrv; uci commit firewall
> echo "iptables -A input_daemon -p tcp --dport 8080 -j zone_wan_ACCEPT"
> >> /etc/firewall.websrv

So now I get:

> r...@fonera:~# cat /etc/config/firewall | grep -A 1 "include"
> config 'include'
>     option 'path' '/etc/firewall.fon'
> --
> config 'include' 'proxy'
>     option 'path' '/etc/firewall.proxy'
> --
> config 'include'
>     option 'path' '/etc/firewall.user'
> --
> config 'include'
>     option 'path' '/etc/firewall.websrv'
> r...@fonera:~# 

But unfortunately again - as I wrote to Matthijs before - after entering
this and after rebooting as well the settings are not effective for the
running webserver process which is enabled by wan access in
firewall.websrv ( -> inside this file you only find the line: iptables
-A input_daemon -p tcp --dport 8080 -j zone_wan_ACCEPT).
When I then enter this command vis SSH the hosted webpages on the
usb-stick are accessible from the web - but only for a few minutes.

Regards, Kyros




-------- Original Message  --------
Subject: Re: [fonosfera] Iptable rules in firewall.user don't last
anymore - after fw2.3.6.0 serverside change?
From: Inouk Bourgon <inouk.bour...@fon.com>
To: development@fonosfera.org
Date: Fri Apr 16 2010 12:52:34 GMT+0200 (CEST)
> [...]
> firewall.user might be used by something else... You may want to pick
> a name specific to your app like /etc/firewall.websrv or so. If you
> one day you want to release your work through a plugin you will just
> have to add to your install script:
>
> uci add firewall include; uci set
> firewa...@include[-1].path=/etc/firewall.websrv; uci commit firewall
>
>
>
> Inouk 


_______________________________________________
Development mailing list
Development@fonosfera.org
http://fonosfera.org/mailman/listinfo/development

Reply via email to